Upgrid Logo
  • Buy energy
  • Sell energy
  • LEG pricing
  • Municipalities
  • About Us
Buy energySell energyLEG pricingMunicipalitiesAbout Us
JOIN UPGRIDLOGIN

Privacy Policy

Last updated: 5 August 2026

This privacy policy replaces the previous versions at upgrid.ch/privacy-policy and upgrid.ch/terms-conditions#data.

1. Controller and scope

The controller responsible for processing personal data is:

UpGrid AG Soodring 13, 8134 Adliswil, Switzerland info@upgrid.ch · +41 44 505 50 00

This policy applies to our website upgrid.ch, the platform at app.upgrid.ch, and the services we provide in connection with local electricity communities (LEG), self-consumption associations (ZEV/vZEV), and energy communities.

Our role differs depending on the community. When we operate an energy community ourselves and conclude the participation agreement in our own name, we are responsible for processing personal data; this policy then applies. When the community is operated by a grid operator, energy supplier, municipality, or other operator and we merely provide our platform to them, we act as a processor on their instructions. The respective operator is then responsible, and its privacy policy applies; in that case our processing is governed by the data processing agreement between the operator and UpGrid AG. Who is responsible for your community is set out in your participation agreement; on request we will tell you.

The same applies to partner, white-label, and cooperation solutions: when the platform appears under a partner's or customer's brand or they use it for their own use cases, the respective partner or customer is the controller and their privacy policy applies; our processing is governed by the data processing agreement between them and UpGrid AG. UpGrid acts solely on instruction in those cases and is not the controller for that processing; this policy does not apply to it. It remains applicable for use of our own website and our own communications.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP).

2. Personal data we process

We process the personal data required to provide our services. This includes in particular identification and contact data, address and property data, information on generation assets, metering point and meter data, contract, billing and payment data, communication data, and technical and usage data arising when you use our website and platform.

3. Purposes of processing

  • Establishing, managing and operating energy communities and representing participants vis-à-vis the distribution grid operator
  • Handling enquiries, registrations and contract conclusions
  • Energy data management, allocation of in-community consumption and self-consumption optimisation
  • Billing, invoicing, payment processing and dunning
  • Visualisation of the energy community for participants
  • Customer support and technical assistance
  • Operation, security, error analysis and further development of the platform
  • Detection and prevention of misuse and fraud
  • Information about our services, cancellable at any time
  • Compliance with legal obligations, in particular energy, tax and accounting requirements

Consent is not required for these processing activities.

4. Disclosure to third parties

4.1 Market partners and authorities

Operating an energy community requires exchanging master and meter data with the distribution grid operator and electricity suppliers. Data may also be disclosed to authorities and public bodies where required by law. These recipients process data as independent controllers; their privacy policies apply to their processing.

4.2 Other participants in the same community

Where necessary for visualisation or other purposes of operating the energy community, in particular billing between electricity producers and consumers, we disclose the necessary information to the participating members (for example, name and address).

4.3 Processors

We use service providers who process personal data on our behalf and according to our instructions. The service providers used are listed in section 5.

The listed service providers in turn engage their own subprocessors, in particular data centre, infrastructure, network and delivery service providers, and may process personal data at additional locations, including outside Switzerland. These further subprocessor relationships may change at any time; we do not list them individually.

By using our platform you acknowledge that processing personal data along such chains of subprocessor relationships is inherent in the use of any market-standard software solution. We are not individually aware of the contractual bases used by individual service providers and their subprocessors, and we do not review them. We accept no liability for the conduct of our service providers or their subprocessors, for their data processing, or for damage arising therefrom, to the extent permitted by law.

4.4 Providers with their own responsibility

For electronic contract signing and payment processing, the providers involved may process personal data partly for their own purposes as independent controllers, for example to meet their own legal obligations, for fraud prevention or to evidence signing. They present their own terms and privacy policies in the respective process, for example when signing a contract or making a payment. The respective provider is responsible for that processing, not UpGrid.

By using these services you acknowledge that those providers' terms and privacy policies differ from ours, may contain their own choice-of-law and jurisdiction clauses, and that you can and should review them in the respective process. We accept no liability for their content, compliance or changes, or for damage from processing by those providers, to the extent permitted by law.

4.5 Other cases

We also disclose data where we are legally obliged to do so, to protect our rights, and in the context of corporate transactions such as a merger or acquisition.

5. Service providers used

ServicePurposeLegal entity and country of seatProcessing location, where selectable, non-exhaustive
VercelHosting and delivery of website and platformVercel Inc., USAEU; logs and operational data partly elsewhere
SupabaseDatabase, authentication, file storage (contract documents, invoices)Supabase Inc., USA / Supabase Pte. Ltd., SingaporeEU
ResendSending transactional emails (registration, contract delivery, one-time codes)Plus Five Five, Inc., USAUSA
PostmarkSending transactional emailsActiveCampaign, LLC, USAUSA
BrevoEmail marketing, communication automation and contact data synchronisationBrevo SAS (formerly Sendinblue), FranceEU
eSignatures.comElectronic signing of participation agreements, sending signature invitations by email and SMSGalamian Pty Ltd, AustraliaEU; delivery, logging and further processing partly elsewhere
StripePayment processing for energy invoicesStripe Payments Europe Ltd., Ireland; group seat USAEU / USA
bexioAccounting and bookkeepingbexio AG, SwitzerlandSwitzerland / EU
SentryError and performance monitoring of the platformFunctional Software, Inc., USAEU
PostHogProduct and usage analyticsPostHog, Inc., USAEU
swisstopo (geo.admin.ch)Geocoding of address dataFederal Office of Topography swisstopo, SwitzerlandSwitzerland / EU
Google Maps PlatformGeocoding of address dataGoogle Ireland Ltd., Ireland; group seat USAEU / USA
Google WorkspaceEmail, calendar and file storage for our correspondenceGoogle Ireland Ltd., Ireland; group seat USAEU / USA
Google AnalyticsWeb analytics [only with your consent]Google Ireland Ltd., Ireland; group seat USAEU / USA
Meta PixelReach measurement and advertising on the website [only with your consent]Meta Platforms Ireland Ltd., Ireland; group seat USAEU / USA
IntercomSupport chat and customer enquiriesIntercom R&D Unlimited Company, Ireland; group seat USAEU / USA
SanityContent management system for website contentSanity AS, NorwayEU / EEA

We keep this list up to date. Changes are published with a new version of this policy.

6. Disclosure abroad

We also disclose personal data to countries outside Switzerland. Currently affected countries include EU and EEA states, the United Kingdom, the USA, Singapore and Australia.

A server location in Switzerland or the EU does not exclude access from the service provider's country of seat: personal data may be viewed there, among other things, in the context of support, maintenance and administration, and authorities in the country of seat may request access under applicable local law.

Access to personal data by our employees and by persons we engage is not limited to Switzerland. It may occur from the countries where those persons work for us, including Pakistan, the Philippines and Indonesia, in the context of development, operation, maintenance, support and administration. These persons act on our instructions and are bound by confidentiality.

For countries for which the Federal Council has determined adequate data protection, disclosure is based on that determination. This applies, for example, to the USA where the recipient is certified under the Swiss-U.S. Data Privacy Framework. In other cases we rely on safeguards provided by the relevant service providers, in particular their standard contractual clauses. We do not ourselves review or warrant their effectiveness. We accept no liability for their content, compliance or changes, to the extent permitted by law.

7. Your rights

You may exercise the rights granted to you under the FADP. Contact info@upgrid.ch; we may request additional information to identify you.

8. Cookies and tracking

We use cookies and similar technologies on our website and platform. You may refuse or withdraw non-essential cookies at any time via cookie settings.

In particular, the following are used:

ServiceProviderPurpose
Supabase Auth (first-party cookies)UpGrid / SupabaseLogin, session management, security
SentryFunctional Software, Inc., USAError and performance logs, incl. IP address
PostHog (analytics, feature flags)PostHog, Inc., USAUsage analytics, feature control, surveys
PostHog Session ReplayPostHog, Inc., USASession recording (page layout, mouse and click behaviour)
Google Tag ManagerGoogle Ireland Ltd.Integration and control of the services below
Google AnalyticsGoogle Ireland Ltd.Web analytics and reach measurement
Google Ads / FloodlightGoogle Ireland Ltd.Conversion measurement and remarketing
Meta PixelMeta Platforms Ireland Ltd.Reach measurement and advertising on Meta platforms
LinkedIn Insight TagLinkedIn Ireland Unlimited CompanyConversion measurement and audience building
IntercomIntercom R&D Unlimited Company, IrelandSupport chat and assignment of enquiries

Meta Pixel data is additionally forwarded via a server-side service.

9. Changes to this policy

We update this privacy policy when our services, the service providers used or the legal framework change. The version published on our website applies.

10. Authoritative language version

The German version of this privacy policy is authoritative. Versions in other languages displayed on our website are translations for ease of understanding. In case of discrepancies or contradictions, the German version applies.

11. Contact

UpGrid AG

Soodring 13, 8134 Adliswil, Switzerland

info@upgrid.ch · +41 44 505 50 00

Upgrid Logo

SERVICES

  • Buy energy
  • Sell energy
  • Find your community
  • Free consultation

SUPPORT

  • Contact
  • Imprint
  • Cookies
  • FAQ

TOOLS

  • Solar Production Calculator
  • Energy Savings Calculator

About Us

  • Stories & insights
  • About Us
  • info@upgrid.ch
  • Upgrid

UPGRID AG

Soodring 13, 8134 Adliswil

Switzerland

info@upgrid.ch
Request a call

UpGrid AG © 2026

Data protectionTerms & conditions
Swiss Made Software